Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfd1902e-4a63-3a02-942f-21b01dea1180.roa
File:                     cfd1902e-4a63-3a02-942f-21b01dea1180.roa (raw, json)
Hash identifier:          Rm6aiE13XSxl5A4UQ/n/D9DN6NesLZPuuFtB4RS/KJU=
Subject key identifier:   77:37:03:E7:0A:E3:6A:78:B0:67:BE:AB:F9:72:1B:B2:B0:9F:61:35
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642944F55
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfd1902e-4a63-3a02-942f-21b01dea1180.roa
Signing time:             Fri 05 Oct 2018 04:55:07 +0000
ROA not before:           Fri 05 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        50.18.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:94:4f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=f474cc0d-4ead-490f-9be9-7df9201599fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:cd:5d:7d:f0:55:d1:df:13:01:b6:e0:f5:
                    c5:e8:e2:c5:68:e5:77:a7:f6:ed:42:91:e9:1f:30:
                    ea:19:8c:09:b6:c5:67:83:1a:06:01:8e:4b:d9:3f:
                    db:e6:25:ba:73:ec:40:24:1d:c2:f8:3f:d0:71:da:
                    d8:b0:20:6e:0d:57:79:76:60:82:a5:31:0a:e5:4e:
                    9a:a5:a4:56:4e:1a:3e:7c:53:42:27:98:35:97:bb:
                    88:4a:a6:bd:5a:6b:1d:5e:ac:cb:0a:02:55:6f:a6:
                    cf:07:92:62:af:1b:83:85:4a:59:cc:67:38:51:9f:
                    86:59:79:5d:96:7e:7d:e9:c5:70:c7:e9:ff:9b:b9:
                    f0:8b:b3:f4:39:51:e7:69:93:2f:95:4a:d5:af:39:
                    ab:db:1d:d9:4d:77:a4:2a:f9:71:1b:e6:8e:11:e3:
                    41:43:3b:d7:78:01:f4:77:81:30:30:1f:92:35:8e:
                    43:67:5f:1a:ce:db:ce:54:00:8d:ca:ab:8e:6d:e3:
                    8d:7c:dd:59:02:de:0a:0c:0f:c8:8f:6e:fb:4e:16:
                    36:0a:36:d8:06:20:2d:32:00:b9:1a:9f:1b:34:02:
                    7e:a3:4d:63:39:27:bc:4a:81:25:41:05:1a:c2:64:
                    12:fb:0e:83:bf:66:0b:9e:43:2b:63:a7:f8:28:21:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:03:E7:0A:E3:6A:78:B0:67:BE:AB:F9:72:1B:B2:B0:9F:61:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfd1902e-4a63-3a02-942f-21b01dea1180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:56:0e:ef:c4:92:24:f5:7b:bf:cd:10:26:63:4f:95:1c:
         0d:50:db:a5:3c:98:f0:42:15:3f:1a:d8:9c:86:e0:0d:d8:06:
         83:72:60:92:96:54:42:44:0b:1e:b8:ff:47:e6:27:3a:24:4e:
         81:0e:24:c4:66:c1:60:17:95:54:e7:fa:5f:1f:ba:70:d5:a7:
         11:97:3c:f0:49:62:43:32:1b:a8:da:a8:f8:20:3e:98:ec:ae:
         89:06:c8:fb:f3:6d:77:b9:1c:62:0d:3a:26:6b:4a:d8:71:4d:
         2b:eb:f5:19:17:2e:f3:b3:7e:9e:51:05:0a:84:88:19:fd:51:
         11:d0:81:e1:e5:2d:0e:22:2a:83:e0:e1:af:24:dc:9e:19:84:
         20:a2:a9:57:a0:f8:f2:bd:72:56:20:2b:48:a9:a8:af:6e:65:
         1a:70:16:b4:f0:8c:fc:e1:38:34:35:4b:3a:f1:11:4e:46:75:
         78:77:81:60:e7:36:10:47:b5:e2:36:52:42:54:10:13:6f:cf:
         5b:23:c3:aa:a4:f2:6e:de:90:72:2f:d5:06:83:4b:29:2a:11:
         b4:84:43:97:31:17:67:ab:d0:35:03:bb:da:88:72:96:49:ab:
         f3:0f:8d:15:d3:92:17:20:60:a0:ea:84:21:f6:3b:d3:bf:19:
         5c:3a:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----